ThimPress 厂商相关 120 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
ThimPress 主要开发 WordPress 插件，核心用途在于提供页面构建、电商及表单功能。其历史漏洞记录显示，常见风险包括跨站脚本（XSS）、任意文件读取及未授权访问，部分版本存在远程代码执行隐患。截至最新统计，该项目已收录 100 条 CVE，反映出其代码库在输入验证与权限控制方面存在长期安全短板，用户需及时更新以规避潜在攻击风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-12230 | WordPress LearnPress 跨站脚本漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-79 | 6.4 | Medium | 2026-09-08 |
| CVE-2026-82024 | thimpress learnpress 跨站脚本漏洞 — LearnPress CWE-79 | 5.4 | Medium | 2026-09-03 |
| CVE-2026-82023 | thimpress learnpress 授权问题漏洞 — LearnPress CWE-863 | 4.3 | Medium | 2026-09-03 |
| CVE-2026-77823 | thimpress LearnPress SQL注入漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-89 | 4.9 | Medium | 2026-09-01 |
| CVE-2026-75982 | WordPress LearnPress 授权问题漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 4.4 | Medium | 2026-08-25 |
| CVE-2026-66458 | WordPress RealPress SQL注入漏洞 — RealPress CWE-89 | 9.3 | Critical | 2026-08-13 |
| CVE-2026-15464 | WordPress WP Hotel Booking 跨站脚本漏洞 — WP Hotel Booking CWE-79 | 6.4 | Medium | 2026-07-24 |
| CVE-2026-15094 | WordPress WP Hotel Booking 跨站脚本漏洞 — WP Hotel Booking CWE-79 | 6.1 | Medium | 2026-07-17 |
| CVE-2026-13765 | WordPress LearnPress 授权问题漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 7.5 | High | 2026-07-17 |
| CVE-2026-11901 | WordPress WP Hotel Booking 输入验证错误漏洞 — WP Hotel Booking CWE-345 | 5.3 | Medium | 2026-07-11 |
| CVE-2026-11392 | WordPress WP Hotel Booking 跨站脚本漏洞 — WP Hotel Booking CWE-79 | 6.1 | Medium | 2026-07-10 |
| CVE-2026-12732 | WordPress LearnPress 跨站脚本漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-79 | 6.4 | Medium | 2026-07-01 |
| CVE-2026-11988 | ThimPress LearnPress 授权问题漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-639 | 6.5 | Medium | 2026-07-01 |
| CVE-2026-8502 | WordPress plugin LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 5.3 | Medium | 2026-06-06 |
| CVE-2026-7565 | WordPress plugin LearnPress – Backup & Migration Tool 路径遍历漏洞 — LearnPress – Backup & Migration Tool CWE-22 | 4.9 | Medium | 2026-06-06 |
| CVE-2026-7566 | WordPress plugin LearnPress – Backup & Migration Tool 代码问题漏洞 — LearnPress – Backup & Migration Tool CWE-502 | 6.6 | Medium | 2026-06-06 |
| CVE-2025-53346 | WordPress plugin Thim Core 安全漏洞 — Thim Core CWE-862 | 4.3 | Medium | 2026-06-02 |
| CVE-2025-53345 | WordPress plugin Thim Core 安全漏洞 — Thim Core CWE-862 | 8.8 | High | 2026-06-02 |
| CVE-2026-48865 | WordPress plugin LearnPress 跨站脚本漏洞 — LearnPress CWE-79 | 7.1 | High | 2026-06-01 |
| CVE-2026-7648 | WordPress plugin LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-639 | 4.3 | Medium | 2026-05-14 |
| CVE-2026-4650 | WordPress plugin FundPress 安全漏洞 — FundPress – WordPress Donation Plugin CWE-862 | 5.3 | Medium | 2026-05-02 |
| CVE-2026-4365 | WordPress plugin LearnPress 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 9.1 | Critical | 2026-04-14 |
| CVE-2026-4333 | WordPress plugin LearnPress – WordPress LMS Plugin 跨站脚本漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-79 | 6.4 | Medium | 2026-04-08 |
| CVE-2026-25002 | WordPress plugin LearnPress – Sepay Payment 安全漏洞 — LearnPress – Sepay Payment CWE-288 | 7.5 | High | 2026-03-25 |
| CVE-2026-3225 | WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 4.3 | Medium | 2026-03-23 |
| CVE-2026-27065 | WordPress plugin BuilderPress 安全漏洞 — BuilderPress CWE-98 | 9.8 | Critical | 2026-03-19 |
| CVE-2026-1870 | WordPress plugin Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor 安全漏洞 — Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor CWE-862 | 5.3 | Medium | 2026-03-14 |
| CVE-2026-3226 | WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 4.3 | Medium | 2026-03-12 |
| CVE-2026-1787 | WordPress plugin LearnPress Export Import – WordPress extension for LearnPress 安全漏洞 — LearnPress – Backup & Migration Tool CWE-862 | 4.8 | Medium | 2026-02-21 |
| CVE-2026-27050 | WordPress plugin RealPress 安全漏洞 — RealPress CWE-352 | 5.4 | Medium | 2026-02-19 |
本页汇总了 ThimPress 厂商截至目前公开的全部 120 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。